linux-malware · Index

17ddd405e4ed78129808dcf5a3381568d8f74878ca0535249cfb31340950ea85.elf.x86_64 Apr 24 linux-malware

17ddd405e4ed78129808dcf5a3381568d8f74878ca0535249cfb31340950ea85 K(Mc)O₂(Er₂I)H₅(Cm₄F₂Os₃Po₇Ti)Md₂(BiHe)Th

100% BPFDoor malware indicators present

42473f2ab26a5a118bd99885b5de331a60a14297219bf1dc1408d1ede7d9a7a6.elf.x86_64 Apr 24 linux-malware

42473f2ab26a5a118bd99885b5de331a60a14297219bf1dc1408d1ede7d9a7a6

ed932cb991c7464a20aa848a60d5584dfffe8a496c7104ea5af746df0f90d245.elf.sparc Apr 24 linux-malware

ed932cb991c7464a20aa848a60d5584dfffe8a496c7104ea5af746df0f90d245 KO₅(AsI₂Dy₂ErC)H₄(Cm₄F₃Po₅Db)Md₃(ArBi₃He)

1f56bc65381ff6e095c5aa0c84de5d368c08f3a8ee12a0e84c67fcd80626b4fa.elf.mips.unpacked Apr 24 linux-malware

c095735dfdf500f1acb657690269e58a05a202c9d761bb31b02a0bee84bef8ee

rc.d.rar Apr 24 linux-malware

c0e1e717b2dd723f653107c63cdac04d96cea9420e952958e0426a91950beec4 K(Am)O₁₀(P₆Er₈I₄AsCCa₂Dy₃LaSXe)H₅(F₃₁Cm₅HfOs₁₇Po₁₈)Md₂(Bk)

97% Malicious init scripts, persistence, evasion

56580E7BA6BF26D878C538985A6DC62CA094CD04.elf.x86_64 Apr 24 linux-malware

2daa5503b7f068ac471330869ccfb1ae617538fecaea69fd6c488d57929f8279 O₂(PrEr)H₃(CmFOs₂)Th

100% Linux rootkit kernel module

27c1a20a1cfe561a2ba24b1af9e63bd227136583c9ac055bd74faf5661277fef.elf.x86 Apr 24 linux-malware

27c1a20a1cfe561a2ba24b1af9e63bd227136583c9ac055bd74faf5661277fef K(Li)O(As)H₃(Cm₃FPo)Md(Bi)Th

100% Mirai trojan, C2, destructive

BFCC4E6628B63C92BC46219937EA7582EA6FBB41.elf.x86_64 Apr 24 linux-malware

8a0a9740cf928b3bd1157a9044c6aced0dfeef3aa25e9ff9c93e113cbc1117ee K₂(AmLi)O₂(CaDy₂)H₆(Cm₁₄Cr₁₀Db₅F₈Os₇Po₇)Md₃(Bi₂BkHe₂)Th

98% Backdoor/rootkit SSH implant with PTY shell

25c30940a3eab401048b68c888e7ad1a6601e2bcdbc85b3027f213ca93bd6225.elf.x86_64.unpacked Apr 24 linux-malware

25612e2bac522dc7634ed3957eb93f301c77ac99c5e667a93ce8e8aa2e39aa2c O₆(CIAsDyErP₂)H₅(Cm₂DsF₈Os₄Po₆)Md₄(Bi₂BkHe)Th

20180208/Lslstasking/timing

be07c4b2534bf9a2e41ee227e5ef31e815be44a1cf574d8a7a23f3a54b4bce23.elf.arm.unpacked Apr 24 linux-malware

e820fd06a405e2e451d21725a018c77b12ac25bf209b528196427d1d367d6f9f O₃(CDyP₂)H₅(Cm₃DsF₈Os₃Po₂)Md₃(ArBi)Th

98% Persistence, C2, and evasion

0b8e6a11adaa3df120ec15846bb966d674724b6b92eae34d63b665e0698e0193.elf.x86_64 Apr 24 linux-malware

0b8e6a11adaa3df120ec15846bb966d674724b6b92eae34d63b665e0698e0193 O(Er₂)H₆(Cm₈Cr₅DbF₂OsPo)Md₅(Bi₂HePt)Th

99% Bot binary with crypto and evasion

FE26CB98AA1416A8B1F6CED4AC1B5400517257B2.elf.x86_64 Apr 24 linux-malware

bcfb4d908469db43ffd8370ebca6b3e8b75470fa997ef10b7a451fa3f489acae K₂(AmLi)O₉(SAsCaDyErEuI₂LaPr)H₆(Cm₁₄Cr₈DbF₁₅Os₇Po₈)Md₄(Bi₄BkHe₂)Th

backdoor/fontonlaketrojanized/backdoor

2e0aa3da45a0360d051359e1a038beff8551b957698f21756cfc6ed5539e4bdb.elf.x86_64 Apr 24 linux-malware

2e0aa3da45a0360d051359e1a038beff8551b957698f21756cfc6ed5539e4bdb ✓ K(Mc)O₂(Er₂I)H₆(Cm₄DbF₂Os₃Po₇Ti)Md(He₂)Th₂

100% BPFDoor malware indicators present

204046B3279B487863738DDB17CBB6718AF2A83A.elf.x86_64 Apr 24 linux-malware

5a1a0fe128e5e110570391c80a36d535a5a54af0dcb808d53e4eb1532344df99 K₂(AmLi)O₅(As₃ErAlCaDy)H₆(Cm₁₄Cr₉Db₂F₄Os₇Po₇)Md₃(Bi₃BkHe)Th₂

100% UPX packed reverse shell backdoor

346d49f539e31f1caaa102385742761e4f8fbc8e7e0e9981a018d79cd908c6b2.elf.x86.unpacked Apr 24 linux-malware

9c33e6aad8862369c6d1e8bc87daa568dc5ff44bc49a109d8bcafdbce626556c KO₄(C₄I₂La₂As₂)H₃(Cm₅F₂Db₃)Md₃(Bi₃He)Th₂

74ef6cc38f5a1a80148752b63c117e6846984debd2af806c65887195a8eccc56.elf.x86_64 Apr 24 linux-malware

74ef6cc38f5a1a80148752b63c117e6846984debd2af806c65887195a8eccc56 ✓ K(Mc)O₂(ErI)H₅(Cm₃F₂Os₃Po₇Ti)Th₂

100% BPFDoor malware indicators present

6fbbbd21cd5895553e7caf2d8d77e96e5dfe88095f970a8704ce472eb1eb219b.elf.arm Apr 24 linux-malware

6fbbbd21cd5895553e7caf2d8d77e96e5dfe88095f970a8704ce472eb1eb219b K(Li)O₂(I₃Dy)H₅(Cm₉DbF₈Os₃Po₃)Md₆(ArBi₃BkV)

98% Malware strings, DDoS, C2, slur

3fd677dccec69ce4f0ed20dded252e8ad132ac82e8eede0b8fbe1c1bec587acd.elf.x86_64 Apr 24 linux-malware

3fd677dccec69ce4f0ed20dded252e8ad132ac82e8eede0b8fbe1c1bec587acd K(Mc)O₂(Er₂I)H₆(Cm₄DbF₂Os₃Po₆Ti)Md(He)Th₂

100% BPFDoor malware signature detected

93f4262fce8c6b4f8e239c35a0679fbbbb722141b95a5f2af53a2bcafe4edd1c.elf.x86_64 Apr 24 linux-malware

93f4262fce8c6b4f8e239c35a0679fbbbb722141b95a5f2af53a2bcafe4edd1c ✓ O(Er)H₄(Cm₁₀FOsPo₃)Md(He)Th₃

100% BPFDoor backdoor signatures detected

SInAR 0.3 Apr 24 linux-malware

d19a7369d535bfb1d5a9c52d35003d81004f06539310402f8bee2e3b37e4db14 O₄(Er₃PrAsS)H₃(Db₂PoOs)Md(Pa)

D4E0E38EC69CBB71475D8A22EDB428C3E955A5EA.elf.x86_64 Apr 24 linux-malware

2a59dd3dfa8b01048d86ef31fa56c12ed501c04e89d8234fab48d3d3774d67bf Th

packer/upx

triage-binary.sh Apr 24 linux-malware

55ccab96df81d6608f803cf655c82b2c7960947c432cbc75268fc1c8bf205613 KO₁₀(Ca₂P₄I₂S₅AsC₂Er₃LaPrXe)H₅(Cm₅F₂Os₄Db₃Po)Md(Pa)

install.lc Apr 24 linux-malware

ed282b6e4b496dfa13b71388a1d9ad4e7c2613a817e065fef940c6d61997c53b

8a602fb9b7c407a13f6e0af4cae702018a7d6bcf36aadb2478ce17a0b668c6d2.elf.x86_64 Apr 24 linux-malware

8a602fb9b7c407a13f6e0af4cae702018a7d6bcf36aadb2478ce17a0b668c6d2 K(Mc)O₃(C₂Er₃I)H₅(Cm₉F₂Os₃Po₇Ti)Md₂(BiHe)Th

100% BPFDoor backdoor implant with masquerading

triage/b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605 Apr 24 linux-malware

b5cf68c7cb5bb2d21d60bf6654926f61566d95bfd7c9f9e182d032f1da5b4605 ✓ O₂(As₂Al)H₃(CmF₂Mg₂)Md₃(Bi₃BkHe)Th

67% Packed MIPS binary with high entropy

8b84336e73c6a6d154e685d3729dfa4e08e4a3f136f0b2e7c6e5970df9145e95.elf.x86 Apr 24 linux-malware

8b84336e73c6a6d154e685d3729dfa4e08e4a3f136f0b2e7c6e5970df9145e95 Th₂

99% Controller/May22trojan/bpfdoor

d59c055530ec412242dc0db8734c85aebf3ff85a83b8a9cdb1b85526bcdda7eb.elf.x86_64 Apr 24 linux-malware

d59c055530ec412242dc0db8734c85aebf3ff85a83b8a9cdb1b85526bcdda7eb K(Mc)O₃(C₂Er₃I)H₅(Cm₉F₂Os₃Po₇Ti)Md₂(BiHe)Th

100% BPFDoor malware indicators present

password.php Apr 24 linux-malware

236cff4506f94c8c1059c8545631fa2dcd15b086c1ade4660b947b59bdf2afbd O₄(AsC₃SXe)H₆(Cm₇Db₆FOs₄PoU)Md(Pt)

100% Web shell with C2 and update mechanism

6fbdb38a85a416557d292566db8662d70461c8c8d0c51a0f78130c5c3646e93f.elf.x86_64 Apr 24 linux-malware

6fbdb38a85a416557d292566db8662d70461c8c8d0c51a0f78130c5c3646e93f Th₂

67% YARA signature file

E20F87497023E3454B5B1A22FE6C5A5501EAE2CB.elf.x86_64 Apr 24 linux-malware

1a16289db625e080172666821a7e2527de8f62669a090854f18978362fdd0ef8 K(Mc)O₃(Er₇AlAs₂)H₄(DbF₂Os₂Po)Md(Bi₂)Th₂

100% Linux rootkit kernel module

0e600095a3c955310d27c08f98a012720caff698fe24303d7e0dcb4c5e766322.py Apr 24 linux-malware

0e600095a3c955310d27c08f98a012720caff698fe24303d7e0dcb4c5e766322 K(Li)O₇(As₅C₇XeEr₂I₂Dy₃P₃)H₉(Cm₂₅Cr₂Db₁₃DsF₈MgOs₁₀Po₁₉Ti)Md₂(In)

100% Process injection, obfuscation, persistence

http___www.hick.org_code_skape_papers_remote-library-injection.pdf Apr 24 linux-malware

5d2e159fe59c1a83859333e8247107ff1a82a3fbfcf7ccd80be987e9f65fa30a O(Xe)H(Po)

fbcc2654899c5c526850fb6d4d6b42bdc4e9e2ea80a60d6fa072581362bfad02.elf.x86.unpacked Apr 24 linux-malware

cc7a2da62aaa8d62c72da6e8efeb6f7eb5a6937bf951f1eb6e7ffe4a6ea6842c MdTh

100% Mirai trojan signature detected

1b29269a4ef50ee56a473eb515732a118d67fe6efa27fd21c057b6fd4ccc501b.elf.sh Apr 24 linux-malware

1b29269a4ef50ee56a473eb515732a118d67fe6efa27fd21c057b6fd4ccc501b KO₄(AsDy₂IP)H₄(Cm₃F₂Po₃Db₂)Md₄(HeArBi₄)

64abc2cf5866e932b0731a6deb487aa3d9756724250de26bac2fb930cd478dc0.elf.sh Apr 24 linux-malware

64abc2cf5866e932b0731a6deb487aa3d9756724250de26bac2fb930cd478dc0 KO₇(As₂C₉I₅P₂AlEr₂S)H₆(Cm₁₁Cr₂Db₃F₂Os₃Po₅)Md₄(BiBkPa)Th

501b775e35790def96abc4f4ccd21975516e6f4569b0d4cd305f3b9a83425598.elf.mips Apr 24 linux-malware

501b775e35790def96abc4f4ccd21975516e6f4569b0d4cd305f3b9a83425598 Md

ce93c31fa6e423edc5fb84fc6df9667e7f60423dffbe05eeb6505e8300b3ad59.elf.arm.unpacked Apr 24 linux-malware

bf8685a4d4dab8dfd8d1c19548b3ef41b58b098b36ead0bcdfbe6375cdd2806c K₂(McTe)O₃(As₂ILa)H₄(F₈Po₄Cm₃Os)Md₄(ArBi₃BkHe)

100% Mirai botnet malware

d5ddff92d2b5f8d7db2f81bef7eee65b02abef658eaf72840204a17e03a89e75.elf.x86_64 Apr 24 linux-malware

d5ddff92d2b5f8d7db2f81bef7eee65b02abef658eaf72840204a17e03a89e75 K(Li)O₄(C₄I₂DyEr)H₅(Cm₁₆DbF₃Os₃Po₉)Md(Bi)Th

100% Mirai botnet dropper with C2 download and scanners

dfdabe9013e783535a76407b61b63e97db283daab202218077cc0b846b3caa42.elf.x86_64 Apr 24 linux-malware

dfdabe9013e783535a76407b61b63e97db283daab202218077cc0b846b3caa42 K(Mc)O₃(C₂Er₂I)H₅(Cm₉F₂Os₃Po₇Ti)Th₂

100% BPFDoor backdoor with evasion

5e0df7eb8b71c031a40c7c6998df3e1916411aea9a3c17f37247723caacd488c.elf.x86.unpacked Apr 24 linux-malware

36b793d08cb5716e5351a29b4c84ff96ceeb92b458a5283f06cec7a4e56545db K₂(Mc₂Te)O₄(C₂I₃LaP)H₄(F₃Cm₁₁Db₂Po₂)Md₄(Bi₂BkHe)Th₂

100% Mirai botnet with C2 and exploits

56556A53741111C04853A5E84744807EEADFF63A.elf.x86_64 Apr 24 linux-malware

5e85b465b85d13a265a3d7b6e0a3d23e1b136306123205097df7b6d78c797f9d O₂(AlAs₂)H₂(F₂Os)Md₃(Bi₃BkHe)Th

67% UPX packed, no sections

054b9da50831cba6177539c58ae496b0d10552bafff63df0048e608cd4c51d47.elf.x86.unpacked Apr 24 linux-malware

d23191dbd1597b1c935a95ad3128bbe1abff0aef4a01a8774e4dbe4fed03bb62 K₂(Mc₇Te)O₄(AsErIP)H₄(F₄Cm₄DbPo₂)Md₄(Bi₂BkHe)Th₃

100% Mirai botnet malware

sys.x86_64.unpacked Apr 24 linux-malware

cd784dc1f7bd95cac84dc696d63d8c807129ef47b3ce08cd08afb7b7456a8cd3 K₃(AmLiMc)O₆(As₂C₅I₃La₂DyXe)H₆(Cm₂₁Cr₁₃Db₅F₁₀Os₅Po₄)Md₄(Bi₂Pt)Th

99% cryptominer/camelotcryptominer/flystudio

340fec891eff2bbeccbef054a6b7e7e04fc09cf3b3b5fdf06accbd193a03b453.elf.x86_64 Apr 24 linux-malware

340fec891eff2bbeccbef054a6b7e7e04fc09cf3b3b5fdf06accbd193a03b453 Th

100% BPFDoor malware signature detected

6F43C598CD9E63F550FF4E6EF51500E47D0211F3.elf.x86_64 Apr 24 linux-malware

717953f52318e7687fc95626561cc607d4875d77ff7e3cf5c7b21cf91f576fa4 O₂(AlEr)H₄(DsF₃MgPo₃)Md(He)Th

100% Linux hacktool evasion indicators

f4a64ab3ffc0b4a94fd07a55565f24915b7a1aaec58454df5e47d8f8a2eec22a.elf.x86_64 Apr 24 linux-malware

f4a64ab3ffc0b4a94fd07a55565f24915b7a1aaec58454df5e47d8f8a2eec22a KO₉(CaEr₄P₄As₃C₉I₅LaCoS₂)H₆(Cm₃Cr₂F₅Os₅Po₃Db₂)Md₄(BiBkPa)

44cd95b2a2cf376900077d8d124db4c9cd00e06534024ec0489becab0fff4431.elf.mips.unpacked Apr 24 linux-malware

dcee323359773a8d47a9024e56ed9cce349eed13bdc12345844430e90ba4185e K₂(McTe)O₃(IAsLa)H₄(F₇Po₂Cm₃Os)Md₃(Bi₃BkHe)

100% Mirai botnet malware

D4E0E38EC69CBB71475D8A22EDB428C3E955A5EA.elf.x86_64.unpacked Apr 24 linux-malware

8c567f3f91e2e78cc8abdc38c48b0ac2653839ba91b3e9c67a4324fc4af95a4b K₂(AmLi)O₉(SAs₂CaDyErEuI₂LaPr)H₆(Cm₁₄Cr₈DbF₁₅Os₇Po₈)Md₃(Bi₂He)Th

98% Detected Linux.Backdoor.Fontonlake

b5bb7be59102b771974777202d04b3357cddec89f34fe1c82b4d394c015b1e23.elf.arm.unpacked Apr 24 linux-malware

b705cad3bf8dc95a6f70937a7fe743ecbd537f07339e4a1f1d2db0dd7c78b337 K₂(McTe)O₃(CI₂La)H₄(F₈Po₅Cm₃Os)Md₃(ArBi₃Bk)Th

100% Mirai botnet malware

spirit.rar Apr 24 linux-malware

d02745286713fd8b683e09b52611abb4e95b2ddcff401fcc075dd7eb41f4966e K₃(McAm₂Li)O₁₂(C₁₁Er₅P₇Ca₃I₈S₂AlAs₆Dy₄EuLaXe₃)H₁₀(Cm₃₉Cr₁₆Db₄Ds₂F₄₁HfMgOs₂₇Po₂₄U)Md₆(Bi₅Bk₂He₂PaPt)Th₃

92% http/transportlinux/generic_threat

bf3ebc294870a6e743f021f4e18be75810149a1004b8d7c8a1e91f35562db3f5.zip Apr 24 linux-malware

bf3ebc294870a6e743f021f4e18be75810149a1004b8d7c8a1e91f35562db3f5 K(Mc₂)O₅(I₆As₂CDyP₂)H₇(Cm₃Cr₆Db₂F₅MgOs₄Po₈)Md₇(Si₃ArBi₆He₃PdPt)Th₂

99% LockBit ransomware multi-arch binaries

74D755E8566340A752B1DB603EF468253ADAB6BD.elf.x86_64 Apr 24 linux-malware

ca2a13d0176b5c118f27d4ec4b7cd76b89f5276013be5751166ebb0d7b21d9c6 K(Mc)O₄(Er₇PrAlAs₂)H₄(DbF₄Os₇Po)Md(Bi₃)Th₂

93% Linux rootkit with kernel hooks

cca78516c62e1b7cf3c56b665a3537dca6beb54d335c633454b325fd44c4f760.elf.x86_64 Apr 24 linux-malware

cca78516c62e1b7cf3c56b665a3537dca6beb54d335c633454b325fd44c4f760 K(Mc)O₃(C₃Er₃I)H₆(F₃Cm₉DbOs₃Po₇Ti)Md(He₂)Th₃

100% BPFDoor backdoor indicators

16ea5b4e968611bc48f5d7709a1d88178f4603080c930b352e7226bf769b06e5.elf.mips.unpacked Apr 24 linux-malware

53de2e20011a155a688f482d7af8e9e8637abde7e2e64b8e32a3196b6bbf8d7b KO₂(C₂As₄)H₃(CmF₃Po₂)Md₂(HeBi₄)

3743821d55513c52a9f06d3f6603afd167105a871e410c35a3b94e34c51089e6.elf.x86_64 Apr 24 linux-malware

3743821d55513c52a9f06d3f6603afd167105a871e410c35a3b94e34c51089e6 K(Mc)O₃(C₂Er₃I)H₆(Cm₉DbF₂Os₃Po₇Ti)Md(He₂)Th₃

100% BPFDoor backdoor malware

tnput Apr 24 linux-malware

02171868a19aa4a2b223d07b5534bfe78df167e05b249ed90c762c5173ea4093 K(Mc)

botnet/wifatch

prconst.c.PL Apr 24 linux-malware

09a4077a5d25e40af40775f9d673c24b6d4bbee9cad11966fa67ab7d86e1fb86 K(Mc)H(F)

60% legitimate build script

tcplex.pm Apr 24 linux-malware

0afbfe71c6a8c6151a20f7f873b50fcfcaa7dac7b4f76dfadbc7f68151f01ceb K(Mc)

96% Wifatch malware component

dl.c Apr 24 linux-malware

114321f33e19e5603cd23a0371b4b8ac7c8dbf7fc66b9e906168d9d2f1d9c493 O(Dy)H₂(CmF)

speedtest.pl Apr 24 linux-malware

13867a3b7dccd4e9abbdf2b53d479bbd9e13d48499e0e23c417e74925e307b9b K(Mc)H(Cm)

67% Misnamed Wifatch malware component

ser.pm Apr 24 linux-malware

176094e94dfe0e6591d82d3c5b604bfeea796166b1e8ccc6e9f0f346730ff419 K(Mc)O(C)

botnet/wifatch

file.pm Apr 24 linux-malware

1f94083aa9791cd1d26dbc9d67911e7e60954139c02aed7ad54578412ecba0ad K(Mc)

63% Legitimate open-source tool

segscan Apr 24 linux-malware

2701a4630d4daec81115952e01864901fcac223b912877191a752a83d93225d0 K(Mc)

97% Linux.Wifatch botnet malware source

dahua.pm Apr 24 linux-malware

2957c4301881ed612d0181b977e6c07881c79b3ec7ea5cd5c682702414001173 K(Mc)O(Er)

98% Wifatch botnet module

run.pm Apr 24 linux-malware

29d76a5d80dc98e9689c9bc36c8691ce4b2a4867e6c4e4c397d80f9208b65cb7 K(Mc)O₂(CI)H₃(CmFOs)

97% Wifatch botnet malware

sleep.pl Apr 24 linux-malware

2c2306c9e7e8379017f0cbb63d1aea0085fe9139720e3789d732135c71908b90 K(Mc)

100% botnet/wifatch

random_init.pm Apr 24 linux-malware

2d77ce8ce7ad07b62fa129ddb2f4dc7f61b54c9e3a15e9235789caf68337b664 K(Mc)

67% Legitimate open-source randomness tool

cget.pl Apr 24 linux-malware

2d837b288736057d1cb8def111901265004adca2bb7c0852b133067f8f7a6df2

mkseeds Apr 24 linux-malware

376a837cdb7574cc1e70027cf75134b0f9acc79f4dfcf5227601069571a413e7

shscan Apr 24 linux-malware

3784a6cf0e04154c51d0c601742aded2446890c1645da14a8e5ff6bcce6968a8 KH(Po)Md(Pa)

disinfect2 Apr 24 linux-malware

392b4d6b66a9d7c152533a620e650b5ab81e63599e919f2c253beb6ebda6f620 K(Mc)O(Er)

62% Legitimate open-source malware analysis tool

specimen.pm Apr 24 linux-malware

3b62c34324901c37d3460c3bc31b4e4c548d440d55cf8566af994dff2739cd25 K(Mc)O(Er)

64% Legitimate security tool source

plinfo.pm Apr 24 linux-malware

4099400333993976b8a6f8b159ddd25acb54244ea5cf42fe9093fc97848551a2 K

start.pl Apr 24 linux-malware

46905b4f63ef40db7a75709e61e8da7bd32a91cc302dc68b018b67da9c2fc856 K(Mc)H(F₃)

96% Wifatch botnet malware

db.pm Apr 24 linux-malware

4d20b2c8ce3c955bbff22ecd71f04e6534deea4fbe0b7c43ec6d624b2ef68b16 K(Mc)H(F)

botnet/wifatch

test.pl Apr 24 linux-malware

4d44298761bbe66db510d8717ad1ddaeefa533077dfdae246a53fb96986c34de K(Mc)

100% Wifatch botnet malware

cfg.pm Apr 24 linux-malware

509cebe2589b4a077ca1fcb66cccaa471e9e92ab897dc5237218f0f321f56596 K(Mc)

100% Wifatch botnet configuration module

socks.pm Apr 24 linux-malware

51009930be311470d31ab8d43d398023596353ab3693be09c2ed049aef55bee7 K(Mc)

97% Wifatch botnet source code

pool.pm Apr 24 linux-malware

51b90d291c7092f0b4403e96eded977d25b029f6b91e7dd0d66de883fa228260 K(Mc)

botnet/wifatch

check.pl Apr 24 linux-malware

5212c43ae8030e5e36d8b461bf2cf0e567d9d9ada561436957d29c60b02a520b KMd(Pa)

mkpl Apr 24 linux-malware

56cbd53740eca77ed3b2587da5d7f1d0772769b3a34a9b3e733fb2f0861f5838

synscan.pm Apr 24 linux-malware

56d754f15e342c86df1777a8e9c67da694e02afc4b4dd52a1cc5710d66672dee K(Mc)H(Cm)

67% Raw socket SYN scanning

bnkill.pl Apr 24 linux-malware

5d17e442069ca1a4b12500ae313a04ed6f0387e67daaa797cffd18621e1b727d K(Mc)

67% Legitimate Wifatch component

plpack.pm Apr 24 linux-malware

5d7f7d63a2c7a984b4c44820af91a1990e5cffa190bde43c578b7a8dc1280e3e K(Mc)

67% Wifatch botnet source code

default.pm Apr 24 linux-malware

5fa72ec89b13aa0e9ff93569ba28990350ae7389492dd6dbc0d216d042384cf1

unlink.pl Apr 24 linux-malware

652216d413418d8536682e58641ba61a485b20d2ae5ff36563bea76912b2ad4d

run.pl Apr 24 linux-malware

654657e183d9fd34f85a3a22e3911287708f9f37b221eb6c4bf50df2d0978d40 K(Mc)H(F₂)

97% Wifatch botnet malware

lock.pm Apr 24 linux-malware

670575d06bae93f5d04b2017c7f1ac399fabd85fa24dc37e22e55647b21ac842 KMd(Pa)

bnkill.pm Apr 24 linux-malware

67e05be8bcee387718c112b989eac533ee9cd9f522790f91af112cf64a7e1c1e K(Mc)

67% Wifatch botnet component

auto.pm Apr 24 linux-malware

68dd21b8e973ea8e24f5aa2eca233c13dcaefb49c82a8bc02790f310135c9145 K(Mc)

96% Wifatch botnet source identified

func.pm Apr 24 linux-malware

6df4769f6b884d73fba79f9b6c99b928a5a333cd85ab50e75f9e9d789d3d6280 K(Mc)H₂(CmF₃)

63% Legitimate open-source Wifatch utility

proc.pm Apr 24 linux-malware

6e51bcd9c422adcde5f4abaee78a03d335b472a553ca592640391ea0d7d68166 K(Mc)

100% Linux.Wifatch botnet source module

load.pl Apr 24 linux-malware

6f016340eba0bab319cc87593ca6cae3fe172078da018f2502b99f911dc5d1d4 KMd(Pa)

bn.pm Apr 24 linux-malware

7a3eb0c78f3fb7c58b8764486ac242946aba534d30b0ef0c363bc0a78b1abf77 K(Mc)

67% Flagged as Wifatch botnet component

Makefile.PL Apr 24 linux-malware

7ca6d1f6300d62ea99f681569d97f8402a6405e7c2017f6f47c6c75d2e9ea273

hpv.pm Apr 24 linux-malware

7f0d27001ffdbeea8971b9d4de276ac7fb5ae3a25c9e48ac99f4e334c626a8af K(Mc)

61% Legitimate open-source network tool

.net_bn Apr 24 linux-malware

80a566d6dc9c823a8dd349ecbacb584a2dc10086bfd91813135defab84c7d7f9 O₆(AlAs₂CDyErI₂)H₆(Cm₁₀Cr₃Db₂F₁₀Os₃Po₃)Md₃(Bi₄Bk₂He)

uclibc-tiny.h Apr 24 linux-malware

844af289ee679e07f4899cb88c5727e2c856d2c48c7046b2e656054f0537ed93 O₂(ErEu)H(Os)

event.pm Apr 24 linux-malware

85690e596c675ade24d0a2009a23f74e83f6fa60db5a54507133ce6b61f6b08b K(Mc)

67% Flagged as Wifatch malware

tnclient Apr 24 linux-malware

85947563ffc7fe8c78361b919c3da684b6369511b7dcd71498cf5c474dd540ea K(Mc)H(F)

97% Test code for remote shell client